Use openssl_random_pseudo_bytes to generate all tokens.

No longer use pseudo-random MD5 hashes as tokens, but simply generate 16 random
bytes of though OpenSSL. Affects ticket/grant IDs and the CSRF token.